Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-28164HistoryJun 02, 2023 - 5:15 p.m.
CVE-2023-28164
2023-06-0217:15:12
Alpine Linux Development Team
security.alpinelinux.org
9
firefox
thunderbird
user confusion
website spoofing
unix
cve-2023-28164
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.6%
Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | firefox-esr | < 102.9.0-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | firefox-esr | < 102.9.0-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | firefox-esr | < 102.9.0-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | firefox-esr | < 102.9.0-r0 | UNKNOWN |
Related
debiancve
debiancve
CVE-2023-28164
2023-06-02 17:15:12
redhatcve
redhatcve
CVE-2023-28164
2023-03-15 04:44:02
prion
prion
Type confusion
2023-06-02 17:15:00
cve
cve
CVE-2023-28164
2023-06-02 17:15:12
ubuntucve
ubuntucve
CVE-2023-28164
2023-03-15 00:00:00
cvelist
cvelist
CVE-2023-28164
2023-06-02 00:00:00
nvd
nvd
CVE-2023-28164
2023-06-02 17:15:12
veracode
veracode
Information Disclosure
2023-03-18 05:52:17
nessus
nessus
Debian DSA-5375-1 : thunderbird - security update
2023-03-17 00:00:00
AlmaLinux 9 : firefox (ALSA-2023:1337)
2023-03-21 00:00:00
Oracle Linux 8 : thunderbird (ELSA-2023-1403)
2023-03-22 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerability
2023-03-24 08:55:49
Updated thunderbird packages fix security vulnerability
2023-03-24 08:55:49
redhat
redhat
(RHSA-2023:1472) Important: thunderbird security update
2023-03-27 07:49:52
(RHSA-2023:1337) Important: firefox security update
2023-03-20 09:22:32
(RHSA-2023:1444) Important: firefox security update
2023-03-23 10:55:45
osv
osv
Important: thunderbird security update
2023-03-28 13:07:10
Important: firefox security update
2023-03-20 00:00:00
Important: firefox security update
2023-03-20 00:00:00
rocky
rocky
firefox security update
2023-03-28 13:07:10
thunderbird security update
2023-03-28 13:07:10
thunderbird security update
2023-03-28 13:07:54
oraclelinux
oraclelinux
firefox security update
2023-03-20 00:00:00
thunderbird security update
2023-03-22 00:00:00
firefox security update
2023-03-20 00:00:00
debian
debian
[SECURITY] [DLA 3365-1] thunderbird security update
2023-03-20 07:44:55
[SECURITY] [DLA 3364-1] firefox-esr security update
2023-03-17 13:24:29
[SECURITY] [DSA 5374-1] firefox-esr security update
2023-03-15 19:24:11
openvas
openvas
Debian: Security Advisory (DLA-3364-1)
2023-03-20 00:00:00
Mageia: Security Advisory (MGASA-2023-0116)
2023-03-28 00:00:00
ibm
ibm
almalinux
almalinux
Important: firefox security update
2023-03-20 00:00:00
Important: thunderbird security update
2023-03-22 00:00:00
Important: thunderbird security update
2023-03-22 00:00:00
centos
centos
firefox security update
2023-03-22 14:00:31
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-03-27 00:00:00
Firefox regressions
2023-03-27 00:00:00
Firefox vulnerabilities
2023-03-15 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2023-03-17 00:39:20
[slackware-security] mozilla-firefox
2023-03-14 21:32:39
kaspersky
kaspersky
KLA48571 Multiple vulnerabilities in Mozilla Thunderbird
2023-03-14 00:00:00
KLA48552 Multiple vulnerabilities in Mozilla Firefox ESR
2023-03-14 00:00:00
KLA48551 Multiple vulnerabilities in Mozilla Firefox
2023-03-14 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 102.9.0-alt1
2023-03-31 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 102.9.0-alt1
2023-03-31 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 102.9 — Mozilla
2023-03-14 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.9 — Mozilla
2023-03-14 00:00:00
Security Vulnerabilities fixed in Firefox 111 — Mozilla
2023-03-14 00:00:00
redos
redos
ROS-20230420-03
2023-04-20 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-30 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.6%
Related for ALPINE:CVE-2023-28164